CVE-2012-1667 Denial of service in n/a

High 8.5 Published 5 Jun 2012 Updated 6 Aug 2024

Remote attackers can crash the DNS server or leak memory by sending crafted resource records with zero-length data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2012-1667?

CVE-2012-1667 is a high-severity denial of service vulnerability in Isc Bind, published on 5 Jun 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle resource records with a zero-length RDATA section, which allows remote DNS servers to cause a denial of service (daemon crash or data corruption) or obtain sensitive information from process memory via a crafted record.

Weakness: CWE-189

Which versions are affected by CVE-2012-1667?

It affects 1 product.

Linux distribution packages (12)

`bind` Red Hat:rhel_els:4::as	All versions	`20:9.2.4-39.el4`
`bind-chroot` Red Hat:rhel_els:4::as	All versions	`20:9.2.4-39.el4`
`bind-debuginfo` Red Hat:rhel_els:4::as	All versions	`20:9.2.4-39.el4`
`bind-devel` Red Hat:rhel_els:4::as	All versions	`20:9.2.4-39.el4`
`bind-libs` Red Hat:rhel_els:4::as	All versions	`20:9.2.4-39.el4`
`bind-utils` Red Hat:rhel_els:4::as	All versions	`20:9.2.4-39.el4`
`bind` Red Hat:rhel_els:4::es	All versions	`20:9.2.4-39.el4`
`bind-chroot` Red Hat:rhel_els:4::es	All versions	`20:9.2.4-39.el4`
`bind-debuginfo` Red Hat:rhel_els:4::es	All versions	`20:9.2.4-39.el4`
`bind-devel` Red Hat:rhel_els:4::es	All versions	`20:9.2.4-39.el4`
`bind-libs` Red Hat:rhel_els:4::es	All versions	`20:9.2.4-39.el4`
`bind-utils` Red Hat:rhel_els:4::es	All versions	`20:9.2.4-39.el4`

Products include Isc Bind.

How do I fix CVE-2012-1667?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2012-1667 being exploited?

There is no known exploitation of CVE-2012-1667 in the wild and no public exploit code.

All Isc Bind vulnerabilities

Sources

Also known as DEBIAN-CVE-2012-1667, DSA-2486-1, GHSA-8wqw-72q7-h4q9, RHSA-2012:1110.